A858DE45F56D9BC9 archive

201210041822 10ylqh

explained decrypted filler

3DES(name+title) ECB, 33 GUIDs, seed 318

Metadata

Post ID
10ylqh
Title
201210041822 → 2012-10-04 18:22 on A858's clock
Posted (UTC)
2012-10-04 22:22:33
Timezone
UTC−4 · title 18:22 against posted 22:22 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,128 hex characters · 1,064 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210041822) = 8443aa5c364babe75fd904f3cd98f93d (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
33
Filler GUID seed
new Random(318).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
187 · predicted N = 33 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
2 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,128 hex characters = 1,064 bytes = 133 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210041822 (name+title). Key = MD5(password) = 8443aa5c364babe75fd904f3cd98f93d, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 33 GUIDs as hex (shown below).

Decrypted: GUID list

  1 4be3272e-16ec-71ca-8f0e-87c6fd2b891c
  2 9d93e558-ff5f-1a1f-b795-cebe3a372be0
  3 dd1cd9ed-6362-0de2-9f83-7d0dc7a4b736
  4 b8605cba-5836-3f9e-8e1f-a3fe72b1ba7f
  5 87483486-479b-7b35-8219-2338c262a701
  6 619d92b8-054d-4e04-9262-42eae1882305
  7 3db5b7b0-efe1-30dc-8505-4adab03c3dad
  8 7e9b5be1-06f0-81fe-88f6-81bb2b6d7c63
  9 39eb5da7-78db-2ee3-82c3-80517e6c5228
 10 b9e7c06d-7a53-44e5-b409-9563ea7158b7
 11 17d379e0-6b0a-5958-8150-18ef5d2f01f3
 12 f96f377f-a31d-6682-8ab8-2697b3c585aa
 13 ce543d41-913d-2168-b5fc-1de4c1aebc03
 14 d6f6eae6-7651-8ab2-8282-b95ecaace78d
 15 c189e7fe-677d-54c3-aa89-1fc1ef45413b
 16 d410934b-c4e6-5abe-a8b4-e41fa82ecefb
 17 40f6e6ff-3ea3-4d5a-8053-3192d3cf745b
 18 47973b4d-b872-1f3d-aff9-e6f152b56405
 19 d1461ae0-fc7d-2b94-8ca4-8bb974fe7927
 20 60f2ef4d-c0d3-460b-b0f2-014c6057218a
 21 a8827d1f-8247-05af-8448-61eedc64025a
 22 0e290626-b6f4-77d7-92b6-5edac873d734
 23 343944be-2939-6297-9d9c-a8d8f3d3f914
 24 00874132-6b27-116f-b2a3-e18a003b94c0
 25 95386689-82a1-79c2-bafa-3e1e32b17885
 26 87afb971-eb7d-0be5-8717-181c56d30940
 27 dd22236d-a530-36e7-9993-77fd2365831f
 28 a0ac50b0-1782-6b98-82a2-678a8501379f
 29 79eacf36-d3b3-37eb-be4f-6d3aa97370af
 30 532cdbb7-787e-1c19-982e-2d6038322470
 31 d038e0e3-a82b-5320-a90a-34c0493ad0b1
 32 a95fee1c-60a7-1396-a07e-d5a9d9669fbd
 33 3c27f15a-6c3c-1714-adf4-7caba3da7473

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 710374382456285541240761703631511. Exactly this sequence comes out of new Random(318).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 187 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 33; the post has N = 33 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results